Lucene search
GoogleOSV:GHSA-5HR6-VC97-QXXHHistoryFeb 09, 2022 - 11:08 p.m.
XML Injection in Crafter CMS Crafter Studio 3.0.1
2022-02-0923:08:01
Google
osv.dev
12
0.002 Low
EPSS
Percentile
55.2%
Crafter CMS Crafter Studio 3.0.1 is affected by: XML External Entity (XXE). An unauthenticated attacker is able to create a site with specially crafted XML that allows the retrieval of OS files out-of-band.
| CPE | Name | Operator | Version |
|---|---|---|---|
| org.craftercms:crafter-studio | eq | 3.0.1 | |
| org.craftercms:crafter-studio | eq | 3.0.0 |
Related
cve
cve
CVE-2017-15685
2020-11-27 18:15:11
osv
osv
CVE-2017-15685
2020-11-27 18:15:11
prion
prion
Xxe
2020-11-27 18:15:00
cvelist
cvelist
CVE-2017-15685
2020-11-27 17:26:43
github
github
XML Injection in Crafter CMS Crafter Studio 3.0.1
2022-02-09 23:08:01
nvd
nvd
CVE-2017-15685
2020-11-27 18:15:11